# BragJack research shows malicious extensions can seize browser AI agents

_Published Saturday, September 19, 2026 at 12:06 PM EDT · Security, AI · Latest · Tier 2 — Notable_

![BragJack research shows malicious extensions can seize browser AI agents — Primary](https://www.bleepstatic.com/content/hl-images/2026/09/19/browsers-header.jpg)

Security researcher Gal Weizman disclosed BragJack, a proof-of-concept technique that uses one malicious browser extension to hijack AI assistants in five Chromium-based browsers or browser assistants. The research produced two CVEs and more than $20,000 in vendor bug bounties. Weizman showed that an installed extension could manipulate trusted web traffic, then direct privileged AI components to read sensitive data or act for a victim. Google and Microsoft resolved the flaws assigned to them.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/bragjack-attacks-hijack-ai-browser-agents-through-malicious-extensions/)

---
Canonical: https://techandbusiness.org/newswire/MQA4jI9Yoh6XhfAJ2G6Fp7
Published: 2026-09-19T16:06:02.366Z
Story chronology: 2026-09-19T14:56:31.000Z
Retrieved: 2026-09-19T17:45:05.652Z
Publisher: Tech & Business (techandbusiness.org)